441
Self-tests
When the device enters FIPS mode, power-up self-tests and conditional self-tests automatically run to
ensure normal operation of cryptography modules. If either type of tests fails, the device restarts.
Power-up self-tests
Power-up self-tests, also called "known-answer tests," check the availability of FIPS-allowed
cryptographic algorithms. A cryptographic algorithm runs on data for which the correct output is already
known. The calculated output is compared with the known answer. If they are not identical, the known-
answer test fails.
Power-up self-tests fall into the following types.
Table 14
List of power-up self-tests
Type
Operations
Cryptographic algorithm self-tests
Test the following algorithms:
•
DSA (signature and authentication)
•
RSA (signature and authentication)
•
RSA (encryption and decryption)
•
AES
•
3DES
•
SHA1
•
HMAC-SHA1
•
Random number generator algorithms
Cryptographic engine self-tests
Test the following algorithms used by cryptographic engines:
•
DSA (signature and authentication)
•
RSA (signature and authentication)
•
RSA (encryption and decryption)
•
AES
•
3DES
•
SHA1
•
HMAC-SHA1
•
Random number generator algorithms
Cryptographic card self-tests
Test the following algorithms used by cryptographic cards:
•
AES
•
3DES
•
SHA1
•
HMAC-SHA1
